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• A new federal report says hospitals have been negligent in securing radioactive materials 
they use to treat cancer patients, potentially putting the materials in the hands of terrorists 
who could use them to make a dirty bomb. - ABC News (See item 7) 

• Four of five men who escaped September 8 from the Pike County, Missouri, detention 
center by removing a tamper-resistant shower panel were back in custody, officials said. - 
KTVI 2 St. Louis (See item 28) 

• An outage to Internet registrar GoDaddy.com that took thousands of Web sites offline for 6 
hours September 10 was the result of internal network events, not a malicious hacker, the 
company said. - Fox News (See item 36) 

• Authorities evacuated thousands of people in Wyoming, Washington, and Montana as 
raging wildfires continued to destroy and threaten homes, businesses, and other buildings. 

- Associated Press (See item 43) 
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Energy Sector 



1. September 11, Associated Press - (Michigan) US gets $3.7M from Enbridge, closes 
pollution case. Federal regulators said the Canadian owner of a pipeline that ruptured 
in 2010 and dumped more than 800,000 gallons of oil into Michigan’s Kalamazoo 
River has paid a $3.7 million fine. The U.S. Department of Transportation said 
September 10 that the payment sent August 10 closes its enforcement action against 
Calgary, Alberta-based Enbridge Inc. The company owns a pipeline running from 
Griffith, Indiana, to Sarnia, Ontario. The pipeline burst near Marshall, Michigan, 
spewing oil into the Kalamazoo River system. The federal agency said the penalty 
against Enbridge was the largest it has imposed. It cited Enbridge for 24 violations of 
hazardous liquid pipeline regulations, including failure to fix corrosion discovered as 
far back as 2004. It also said that Enbridge failed to detect the rupture for 17 hours. 
Source: http://wwmt.com/template/inews wire/wires.regional.mi/2649af74- 
www.wwmt.com.shtml 



2. September 10, Yuma Sun - (Arizona) Electricity restored to 12,000. Arizona Public 
Service (APS) crews from around the State were working around the clock to restore 
power to thousands of customers who were still without power September 10 after a 
severe storm September 9 took out 65 power poles. Most of the affected residents live 
in the area served by the Foothills substation, which lost all sources of power in the 
storm, said an APS spokesman. The storm initially hit the Yuma area and impacted 
about 19,000. By the evening of September 10, APS had restored power to 12,000 
people, mostly in the Foothills, a company spokeswoman said. About 1,000 were still 
without electricity in isolated pockets of the Foothills, Yuma, and Somerton, she added. 
Crews planned to work through the night and hoped to have power restored to them by 
September 11, she said. 

Source: http://www.vumasun.com/news/power-81659-foothills-lines.html 

3. September 10, San Francisco Chronicle - (California) Chevron pipe was in bad 
shape, feds say. Federal officials investigating the Chevron refinery fire in Richmond, 
California, said they have removed an 8-foot section of the pipe that had thinned 
dangerously before it failed in August and have sent it to a private materials lab to be 
analyzed. U.S. Chemical Safety Board (CSB) investigators observed that the wall of the 
5-16th-inch-thick, 8-inch-diameter pipe leading away from the No. 4 Crude Unit had 
“lost most of its original thickness.” They said September 10 that the section will be 
analyzed for corrosion or other factors that may have led to its rupture and the August 6 
fireball. The CSB’s western regional manager said the probe will focus on whether 
Chevron followed industry standards in deciding to leave the pipe in place last year 
when the refinery was shut down for maintenance. Chevron decided to replace a nearby 
12-inch-diameter line during that shutdown because it was corroded. The firm 
considered replacing the 8-inch line but in the end kept the pipe in place. Federal 
investigators were still trying to determine how badly thinned the pipe was last year 
when Chevron made the initial decision to replace it. 

Source: http://www.sfgate.com/bavarea/article/Chevron-pipe-was-in-bad-shape-feds- 
say-3854828.php#photo-3436133 
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4. September 10, KFXK 51 Longview - (Texas) 40,000 worth of equipment stolen in 
ETX oil field theft. Harrison County, Texas officials asked for the public’s help in 
solving an east Texas oil field theft, KFXK 51 Longview reported September 10. 
Authorities said a 16-foot heavy duty trailer, a control panel, and copper wiring were 
stolen from a Howell Oil Company well site. Howell officials claim they left the 
equipment parked near Owens Comer Road. When the work superintendent returned to 
the location 2 days later, he found the trailer had disappeared. The tan trailer contained 
about 2,000 feet of heavy copper wire and a “soft-start” control panel. The items were 
estimated to be worth $40,000. The control panel is tan and grey in color. The trailer is 
a heavy-duty, double-axle trailer and is also tan. The copper wire is in 200 foot and 83 
foot sections. Details surrounding how the theft happened were unclear, however it 
appeared that the burglars may have entered the site through an unlocked gate. 

Source: http://www.fox51.com/news/40000-worth-equipment-stolen-etx-oil-field-theft 

5. September 10, Denton Record-Chronicle - (Texas) Cut gas pipe shuts down 
highway. A damaged natural gas pipe, with an accompanying cloud of gas, shut down 
U.S. Highway 380 west of Denton, Texas, for more than 2 hours September 10. The 
shutdown caused misery for numerous drivers, since there are few alternate routes in 
the area. A sergeant with the Denton County Sheriff’s Office said a road construction 
crew with the Jagoe Company was digging when equipment struck the gas pipe owned 
by the Targa gas company. The Denton County emergency management officer said 
that the 6-inch diameter line was cut during widening of U.S. 380 near the intersection 
with Smith Road. Krum firefighters evacuated 10 houses and shut down the heavily 
traveled highway between Smith and Ripy roads for about 2 hours. A heavy cloud of 
gas hovered over the area, and firefighters rerouted traffic and asked residents in the 
general area to stay inside their homes until the plume had time to disperse. 

Source: http://www.dentonrc.com/local-news/local-news-headlines/20120910-cut-gas- 
pipe-shuts-down-highway.ece 

For more stories, see items 35 and 40 
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Chemical Industry Sector 

6. September 10, Associated Press - (California) LA-area gas cylinder blast forces 
freeway shutdown. Los Angeles County fire officials said the explosion of a 
compressed-gas cylinder that fell off the back of a truck on State Route 60 briefly 
caused the freeway’s closure and evacuations of some homes in the city of Industry, 
California. A fire inspector told the Los Angeles City News Service that 10 to 20 
canisters of carbon dioxide tumbled off the back of a truck September 10, when one of 
them exploded. Firefighters worked to release pressure from the canisters, and some 
homes in the area were evacuated as a precaution. The fire inspector said eastbound 
State Route 60 and its interchange with Interstate 605 were closed for about 2 hours. 
Source: http://www.contracostatimes.com/califomia/ci 2151 1413/la-area-gas-cylinder- 
blast-forces-freeway-shutdown 
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For more stories, see items 1, 3, 9, and 10 



Nuclear Reactors, Materials and Waste Sector 

7. September 11, ABC News - (National) Dirty bomb threat lurks in U.S. hospitals, fed 
study warns. The Government Accountability Office (GAO) released a report 
September 1 1 saying that hospitals have been negligent in securing the radioactive 
materials they use to treat cancer patients, potentially putting the materials in the hands 
of terrorists who could use them to make a dirty bomb. The GAO warned Congress 
about lapses in hospitals, many of which routinely use equipment containing 
radioactive materials. Nearly four out of five hospitals across the country have failed to 
put in place safeguards to secure radiological material that could be used in a dirty 
bomb, according to the report, which identifies more than 1,500 hospitals as having 
high-risk radiological sources. According to the report, the National Nuclear Security 
Administration spent $105 million to complete security upgrades at 321 of more than 
1,500 hospitals and medical facilities that were identified as having high-risk 
radiological sources. The upgrades included security cameras, iris scanners, motion 
detectors, and tamper alarms. But these upgrades are not expected to be completed until 
2025, so many hospitals and medical centers remain vulnerable, the GAO said. The 
Nuclear Regulatory Commission challenged the GAO’s findings, saying that the 
agency and its partners are vigilant about protecting hospitals and medical facilities, 
and had developed additional voluntary layers of security to do so. The American 
Hospital Association said it was reviewing the GAO’s recommendations. 

Source: http ://abcnew s . go .com/US/negli gent- security-radioactive-material-hospitals- 
terrorism-risk-gao/story?id= 17207 135#.UE9owrJlRjV 

8. September 11, Softpedia - (International) Buggy malware found to target French 
nuclear power company. Experts have come across a malicious element in an email 
sent to French nuclear and energy company Areva that is misconfigured and cannot 
execute, Softpedia reported September 11. The email analyzed by researchers came 
with an executable that extracted a number of family photographs, an iTunes file, and a 
PDF file. While the images were likely stolen from the computer of an unwitting user, 
the PDF actually contained a scanned printout of an internal email from Areva-NC in 
Normandy, France. The information it contained was not of major importance, but it 
clearly showed Areva was not a random target. The malware was the Dark Comet 
Remote Administration Tool, one utilized on numerous occasions in malicious 
campaigns. However, the attack cannot cause any damage to devices because the 
application was not properly configured. The principal security researcher at Norman 
explained that the Trojan is just installed, but it is never executed. Furthermore, it is not 
properly configured, the overall file is very large (around 30 MB), and the iTunes file is 
empty and does not contain any malicious code. He believes that there are three 
possible scenarios: the attack is real but it does not work because the trojan is 
misconfigured, it may only be a test build, or it was simply meant to confuse 
researchers. 
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Source: http://news.softpedia.com/news/Buggv-Malware-Found-to-Target-French- 
Nuclear-Power-Company-291386.shtml 
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Critical Manufacturing Sector 

9. September 11, Pollution Solutions - (California) Three southern California metal 
companies to spend more than $196,000 for federal violations on wastewater 
discharge. The U.S. Environmental Protection Agency (EPA) September 1 1 
announced the conclusion of three recent investigations of southern California metal 
finishing companies that will collectively spend more than $196,650 for hazardous 
waste and Clean Water Act violations. All three facilities are located along the 1-710 
freeway corridor where the effects of pollution are disproportionately higher than in 
other areas of Los Angeles County. AAA Plating and Inspection in Compton agreed to 
pay $74,000 in fines for failure to treat industrial wastewater to federal standards before 
discharge into the Los Angeles County sewer system. Morrell’s Electro Plating in 
Compton will pay $19,500 in fines for the improper management and treatment of 
hazardous waste. In addition, Morrell’s will spend at least $100,000 on the purchase 
and installation of a sludge dryer, reducing hazardous waste generated at the facility by 
336 pounds a day. Service Plating Co. Inc. in Los Angeles will pay $3,150 for failure to 
properly label hazardous waste containers at its facility. Discharge into sewer systems 
included above-limit amounts of chromium, cadmium, nickel, and cyanide. 

Source: http://www.pollutionsolutions-online.com/news/water- 
wastewater/17/epa/three southern California metal companies to spend more than 
196000 for federal violations on wastewater discharge/21885/ 

10. September 10, U.S. Department of Labor - (Montana) U.S. Department of Labor’s 
OSHA cites SeaCast for violations at Butte, Mont., foundry; proposes $104,000 in 
fines. The U.S. Department of Labor’s Occupational Safety and Health Administration 
(OSHA) September 10 cited SeaCast Inc. for 14 safety and health violations - 
including one willful - following an inspection at the company’s foundry in Butte, 
Montana. The company faces proposed penalties of $104,000 following an inspection 
that was initiated after OSHA received complaints alleging safety and health violations. 
Thirteen serious violations involved machine guarding deficiencies, elevated levels of 
respirable silica, not providing a fully implemented respiratory protection program for 
employees, unsecured storage racks and materials, blocked electrical equipment, 
inadequate housekeeping, and failing to reduce the pressure of compressed air nozzles 
to less than 30 pounds per square inch. A willful violation was cited for failing to 
administer a continuous, effective hearing conservation program. 

Source: 

http://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEAS 
ES&p id=22974 
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Defense Industrial Base Sector 



11. September 11, Associated Press - (Pennsylvania) Part of Boeing’s Ridley Park 
factory evacuated. The part of a Boeing factory near Philadelphia that produces the 
CH-47 Chinook helicopter was evacuated September 1 1 after a threatening note was 
found, a company spokesman said. The note forced several hundred employees to leave 
the sprawling plant between 7:30 a.m. and 8:30 a.m. “The threat related to one of our 
production facilities,” said a Boeing spokesman. The Ridley Park factory also produces 
the V-22 Osprey. Another spokesman said first-shift workers were sent home, but 
Boeing was hopeful second-shift workers would be on the job in the afternoon. “The 
investigation into the threat is still continuing inside the building,” he said. 

Source: 

http://seattletimes.com/html/boeingaerospace/2019123113 boeingridleyxml.html 
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Banking and Finance Sector 

12. September 11, Erie Times-News - (Pennsylvania; National) Police suspect ‘Bucket 
List Bandit’ in Erie bank robbery. Police searched September 10 for a man accused 
of using a note to rob an Erie, Pennsylvania branch of Huntington Bank, and the 
suspected robber could be a man known as the “Bucket List Bandit” and wanted in nine 
other States for similar crimes. Police said the man walked into the bank with a note 
demanding money and indicating that the man had a gun. No gun was shown, however, 
according to Erie police. He walked out of the bank with an undisclosed sum of cash. 
The man was reportedly given a dye pack and it exploded after he left the bank. Police 
found some bills with dye on them. Surveillance footage led police to believe he was 
the so-called “Bucket List Bandit,” who earned that nickname after passing a note to a 
bank teller in Roy, Utah. The man is also wanted for robberies in Arizona, Colorado, 
Idaho, Illinois, Missouri, North Carolina, and Tennessee. 

Source: http://www.goerie.com/article/20 1 209 1 1/NEWS02/309 1 099 1 2/Police-suspect- 
’Bucket-List-Bandit 



13. September 11, South Florida Sun Sentinel - (Florida) ATM skimming gang suspected 
in recent cases at Publix Supermarkets. A man seen on security cameras was 
believed to be part of a gang responsible for ATM skimmer devices discovered at 
Publix Supermarkets along Florida’s east coast, authorities said September 10. Since 
August 5, police in six different cities in four counties have reported cases of debit- or 
credit-card stealing devices being used at machines outside of seven Publix 
Supermarkets. The devices, known as skimmers, all appear to be molded, painted, and 
designed to fit the supermarket chain’s Presto ATMs. In at least three of the cities, a 
man wearing Bermuda shorts with colorful patterns, a ball cap, and sunglasses was seen 
on surveillance tapes working with other people installing the high-tech pickpocket 
devices. In at least one of the cases, a pinhole camera that records people punching in 
PIN codes was found along with a skimmer. Since September 7, skimmers have been 
found at Publixes in Coral Springs and Fort Lauderdale. In Daytona Beach, 
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surveillance video showed a man installing what appeared to be a skimmer and 
removing it hours later. 

Source: http://www.sun-sentinel.com/fl-skinuners-at-publix- 
20120910,0,6434089,full.story 



14. September 10, Boston Herald - (Massachusetts; International) SEC accuses Hub firm 
of $26M fraud. The U.S. Securities and Exchange Commission (SEC) September 10 
accused a Boston company of defrauding investors through an alleged $26 million 
scheme that involved claims of manufacturing and selling the “MailDefender,” a 
machine that could irradiate dangerous biological agents such as anthrax in mail. Of the 
approximately $26.8 million in cash generated by BioDefense Corp. from 2004 to early 
2011, $26.2 million came from alleged unlawful security sales to investors rather than 
sales of its “purported” product, said the complaint. BioDefense principals sold 
unregistered securities to investors in the United States by at least 2004 and then started 
using so-called “boiler room” firms to sell shares to overseas investors primarily in the 
United Kingdom in 2008 after attracting the attention of Texas and Massachusetts 
regulators, the SEC claimed. The firm falsely claimed it was preserving its cash assets 
by having employees work for equity, when in fact its largest expense was its 
compensation of its founder, former senior executive vice president, senior officer, and 
others, the SEC alleged. The Massachusetts Securities Division and British authorities 
assisted the SEC in the investigation. 

Source: 

http://bostonherald.com/business/general/view/20220910sec accuses hub firm of 26 
m fraud 



15. September 10, U.S. Department of Justice - (Texas) Dallas County man convicted in 
multi-million dollar mortgage fraud scheme involving upscale town homes in 
Dallas. A federal jury convicted a man on various offenses related to a $8 million 
mortgage fraud scheme he ran in the Dallas area, according to the U.S. Department of 
Justice September 10. The jury convicted the man on one count of conspiracy to 
commit mail fraud and three counts of mail fraud. The evidence at trial showed he ran 
two real estate “investment” businesses called Investor Source and Myriad Investments. 
He located sellers who wanted to unload excess properties and were willing to “kick 
back” substantially all of their proceeds to the defendant. He then recruited straw 
buyers and worked with loan officers to prepare and submit fraudulent loan 
applications on the buyers’ behalf. The loan applications contained numerous material 
false statements, such as overstating the buyer’s income level or assets. He also 
received a substantial kickback from the seller after each of the transactions closed and 
then disbursed a portion of those kickbacks to co-defendants and others involved in the 
fraud. The scheme involved about $6 million in fraudulently obtained proceeds and $2 
million in estimated losses. 

Source: http://www.ntxe-news.com/artman/publish/article 78645.shtml 

16. September 10, PC Magazine - (National) SMS phishing attacks skyrocketed last 
week. In the first week of September, SMS phishing attacks rose 913 percent, making 
spam the No. 1 text-based threat, said a report from Cloudmark, PC Magazine reported 
September 10. In a September 7 blog post, Cloudmark’s senior security researcher cited 
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a single set of attacks that began September 4 as the culprit for the week’s surge. Over 
the course of 4 days, more than 500 unique phishing scams were sent out by attackers. 
Each one followed the same general format - “Fwd: Good Afternoon .Attention 
Required Call.(xxx)xxxxxxx” The phone numbers victims were asked to call included 
area codes from New Jersey, Alabama, Texas, Illinois, California, New York, Rhode 
Island, Missouri, Florida, Michigan, Georgia, and South Carolina, as well as 866, 877, 
and 888 toll-free numbers. Cloudmark reported the attackers were phishing for victims’ 
sensitive credentials via Bank of America account suspensions, Macy’s credit card 
collections, and the U.S. Veteran’s Administration health services. 

Source: http://www.pcmag.com/article2/0,2817,2409520,00.asp 
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Transportation Sector 

17. September 11, Morris Daily Herald - (Illinois) Bus accident sends dozens to 
hospitals. Forty-one people were transported to area hospitals following a pickup truck 
and school bus accident in Marseilles, Illinois, September 10. The bus was 2 miles from 
dropping off about 60 of the total 238 kindergarten through eighth-grade students at 
Milton Pope School when the accident occurred. The accident is still under 
investigation by the Fa Salle County Sheriff’s Office and the Fa Salle County State’s 
Attorney’s Office, but the Fa Salle County sheriff said accident reconstructionists 
believed the bus rolled 1.25 times before coming to a stop on its side. He said while 
many people were transported to hospitals, none of the injuries were expected to be 
life-threatening. Milton Pope School was shut down for the day. 

Source: http://www.morrisdailvherald.eom/2012/Q9/l 1/bus-accident-sends-dozens-to- 
hospitals/a2ivlw7/ 

18. September 10, Parsippany Daily Record - (New Jersey) Electrical box cited in Sparta 
station fire. The fire that destroyed the historic Sparta Train Station in Sparta, New 
Jersey has been determined to be “not suspicious,” the Parsippany Daily Record 
reported September 10. Investigators found that an electrical panel box located on the 
outside of the building was a contributing factor, said a Sparta police sergeant. The fire 
was reported September 3 by a motorist who saw the flames while traveling north on 
Route 15, police said. Firefighters from the Sparta and Ogdensburg fire departments 
battled the blaze for approximately an hour and a half before finally clearing from the 
scene. 

Source: http://www.dailyrecord.com/article/20120910/NJNEWS/309100Q39/Electrical- 
box-cited-Sparta-station-fire?odyssev=navlhead 

For more stories, see items 1, 5, 6, and 39 
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Postal and Shipping Sector 



See item 35 
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Agriculture and Food Sector 

19. September 11, Philadelphia Inquirer - (Pennsylvania) Woman found guilty of double 
murder at Kraft-Nabisco plant. A Philadelphia woman who said she believed 
coworkers had sprayed her with toxic chemicals was found guilty of murder September 
10 in the 2010 shootings at the Kraft-Nabisco Foods plant in northeast Philadelphia, the 
Philadelphia Inquirer reported September 11. She was found guilty by a Philadelphia 
Common Pleas Court Judge of two counts of first-degree murder, attempted murder, 
and reckless endangerment involving three other coworkers and a police officer she 
shot at but missed during the night-shift rampage September 9, 2010. The judge said 
she chose to return to the sprawling plant after being escorted out after an argument 
with three coworkers. The judge said she went to her car, got a .357 Magnum she 
legally owned and kept under the seat, and returned after threatening a guard. 

Source: 

http://www.phillv.com/philly/news/local/20120911 Woman found guilty of double 
murder at Kraft-Nabisco plant.html 

20. September 10, U.S. Food and Drug Administration - (National) Forever Cheese 
Recalls Ricotta Salata Frescolina brand for possible health risk. Forever Cheese 
Inc. recalled all Ricotta Salata Frescolina brand, Forever Cheese lot # T9425 and/or 
production code 441202, from one specific production date due to possible Listeria 
Monocytogenes contamination, the U.S. Food and Drug Administration reported 
September 10. The cheese was sold to distributors for retailers and restaurants in 
California, Colorado, Washington, D.C., Florida, Georgia, Illinois, Indiana, 
Massachusetts, Maryland, Minnesota, Montana, New Jersey, New Mexico, New York, 
Ohio, Oregon, Pennsylvania, Virginia, and Washington State from June 20-August 9. 
Products were sold to supermarkets, restaurants, and wholesale distributors. There have 
been 14 reported illnesses in 1 1 States which may be related to this. The potential for 
contamination was noted after illness was reported in connection with eating cheese. 
Source: http://www.fda.gov/Safety/Recalls/ucm318844.htm 

For more stories, see items 21 and 25 
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Water Sector 



21. September 11, Lansdale Reporter - (Pennsylvania) Blue Marsh lab owner sentenced 
for falsifying test results. A former Douglass, Pennsylvania water testing company 
and its president were sentenced in federal court for their involvement with a 
conspiracy to falsify water test results, some of which went to federal agencies in 
connection with the Hurricane Katrina disaster, the Lansdale Reporter reported 
September 11. The owner of Blue Marsh Laboratories Inc. was sentenced to 9 months 
in prison, and the company placed on 5 years probation for incidents that occurred 
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between September 2005 and September 2007, court documents said. The owner and 
the company must share the cost of $14,1 14 in restitution. The owner and the company 
pleaded guilty to devising a scheme to defraud customers and to obtain money and 
property by means of false and fraudulent representations regarding test results. They 
also admitted to violating the federal Clean Water Act and to submitting a false test 
report to the U.S. Food and Drug Administration (FDA), according to a spokeswoman 
for the U.S. attorney’s office. The indictment charged that during 2 months in 2005, the 
owner and firm prepared and mailed false and fraudulent test results for Hurricane 
Katrina flood water samples which were required by EPA to be tested for 
contamination by various pollutants. It said that between July and September 2007, the 
defendants provided fraudulent test results to the FDA for the testing of certain fruit, 
such as tangelos imported from South America, for contamination by pesticides. 

Source: 

http://www.thereporteronline.com/article/2012091 1/NEWS03/ 12091 9966/blue-marsh- 
lab-owner-sentenced-for-falsifying-test-results 

22. September 10, New Philadelphia Times-Reporter - (Ohio) Tusc. commissioners OK 
funding E. coli reduction system at sewage plant. Tuscarawas County, Ohio 
commissioners signed a memorandum of understanding September 10 to fund a new 
system that will reduce E. coli in the water at the Twin City Sewage Treatment Plant. 
The ultraviolet light disinfectant system will reduce the amount of E. coli in the 
wastewater to meet Environmental Protection Agency standards. It also will get rid of 
the sulfur dioxide used to remove chlorine from the water. “It will remove the E. coli a 
lot more efficiently than the chlorine does,” said the assistant superintendent of the 
Twin City Water and Sewer district. “The operators won’t have to be around the 
chlorine because it’s a hazard.” The water treatment plant serves approximately 3,300 
households in the Twin City area. The new system is set to cost $767,200. 

Source: http://www.timesreporter.com/newsnow/xl903463430/Tusc-commissioners- 
OK-funding-E-coli-reduction-system-at-sewage-plant 

23. September 10, Massillon Independent - (Ohio) Massillon mulls $18M upgrade to 
wastewater plant. The city of Massillon, Ohio, is considering an $18 million upgrade 
and expansion to its regional wastewater treatment plant to limit phosphorus discharges 
and meet future capacity demands, the Massillon Independent reported September 10. 
The county would share half of the cost, which does not include an additional $3 
million for engineering, administrative, and legal fees. In its latest permit for the plant, 
the Environmental Protection Agency (EPA) is requiring the city reduce the amount of 
phosphorus being released following treatment into the Tuscarawas River. The EPA 
wants the city to reduce phosphorus from between 4 to 6 milligrams per liter to 1 . The 
city must begin construction by September 1, 2013. It could face fines if it does not 
comply. 

Source: http://www.indeonline.com/news/x938528889/Massillon-mulls-18M-upgrade- 
to-wastewater-plant 

For another story, see item 9 
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Public Health and Healthcare Sector 



24. September 10, New Philadelphia Times-Reporter - (Ohio) 64 nursing home residents 
evacuated after laundry room fire. An estimated 64 residents from Beacon Pointe 
Rehabilitation Center in Uhrichsville, Ohio, were relocated to other facilities 
September 10 following a fire that started in the facility’s laundry room. The fire was 
contained to a dryer. However, because smoke filled the rest of the building and of 
concerns about chemicals and carbon monoxide, residents were relocated to four places 
including Trinity Hospital Twin City in Dennison, Union Hospital in Dover, 
Schoenbrunn Rehabilitation Center in New Philadelphia and Beacon Pointe 
Rehabilitation in West Lafayette. Claymont City Schools donated at least three buses to 
transport the residents. 

Source: http://www.timesreporter.com/newsnow/xl903463419/64-nursing-home- 
residents-evacuated-after-laundry-room-fire 

For another story, see item 7 
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Government Facilities Sector 



25. September 11, Associated Press - (Georgia; Washington; National) 5 more charged in 
Ga. military militia case. Five more men were charged September 10 in connection 
with an anti-government militia that authorities say was led by U.S. Army soldiers from 
Fort Stewart who stockpiled weapons and talked of bombing a Savannah park fountain, 
poisoning apple crops in the State of Washington, and ultimately overthrowing the U.S. 
government. A Liberty County, Georgia grand jury indicted the five on charges of 
illegal gang activity and various counts involving theft, burglary, and auto-break- ins. 
Those crimes were committed to help fund the militia group, which called itself 
F.E.A.R., short for Forever Enduring Always Ready, a district attorney said September 
11. The new indictments bring to 10 the total number of people charged in connection 
with the militia group. 

Source: http://www.militarvtimes.com/news/2012/09/ap-five-more-arrested-in-army- 
militia-091112/ 



26. September 10, WOFL 35 Orlando - (Florida) UCF building evacuated due to mace 
in AC system. Orange County, Florida Fire Rescue dispatched a hazardous material 
crew to the University of Central Florida Student Union September 10 to handle 
complaints of an odor. Witnesses said a perimeter was set up around the building with 
multiple emergency response vehicles. “People were being told to move back 
repeatedly by firefighters and staff. The atmosphere was that this was not a drill and 
something was occurring inside,” a university student said. Crews have determined the 
odor was caused by distribution of mace through the building’s air-conditioning 
filtration system. The building has since reopened. Eleven people were treated at the 
scene. University police officers are investigating. 
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Source: http://www.wogx.com/story/19505353/ucf-building-evacuated-due-to-mace-in- 
ac-system 



27. September 10, Associated Press - (Wisconsin) Stoughton chemistry teacher burned 
doing experiment. A chemistry teacher is home recovering after burning her hand 
when a science experiment went awry September 10 at Stoughton High School in 
Stoughton, Wisconsin. The superintendent said the teacher was conducting a routine 
experiment to show how chemical reactions happen when a “flash” happened. Some 
students were showing signs of smoke inhalation and were taken to a local hospital. 
Eventually the entire classroom of about 25 students was checked out at the hospital as 
a precaution. They have since been released to their parents. Workers were cleaning the 
classroom. 

Source: http://www.wsaw.com/home/headlines/Chemistry-Teacher-Burned-Science- 
Wing-Evacuated- 1691837 66.html 

For another story, see item 17 
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Emergency Services Sector 

28. September 11, KTVI 2 St. Louis - (Missouri) 4 men captured, 1 still missing from 
Pike County Jail. Four of five men who escaped from the Pike County, Missouri, 
detention center are back in custody, KTVI 2 St. Louis reported September 11. All five 
escaped September 8 by removing a tamper-resistant stainless steel shower panel, 
giving them access to a service area. According to the Pike County Sheriff’s 
Department, three escapees were captured in Midwest City, Oklahoma, September 10. 
A fourth man has also been captured. He was taken into custody without incident on 
Pike 411 less than 1 mile from Hwy. 161 and is back in Pike County jail. The fifth man 
is still on the loose. 

Source: http://fox2now.com/2012/09/10/3-men-captured-2-missing-from-pike-county- 
jail/ 

29. September 11, Denver Post - (Colorado; National) Study finds perilous mold in 
Colorado pot-growing operations. Police and other first responders may be exposed 
during busts of illegal marijuana- growing operations to dangerous levels of mold that 
could lead to potentially deadly respiratory diseases, researchers said September 10. A 
team working with a National Jewish Health researcher reviewed conditions in 30 
marijuana- growing operations in Denver, Littleton, and Larimer County, Colorado and 
found mold levels at times 100 times higher than considered safe and in a few cases so 
high that their instruments could not read the levels. Short-term exposure is not 
typically a reason to be alarmed, though officers with suppressed immune systems are 
especially at risk. The researcher said police should wear protective gear, including 
respirators, especially when they are tearing down operations. Law enforcement leaders 
said they are grateful for the study — funded by a Justice Assistance Grant and money 
from the chiefs and sheriff’s associations — and will take safety measures to ensure the 
well-being of officers. 
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Source: http://www.denverpost.com/news/mariiuana/ci 21511834/study-finds- 
perilous-mold-pot-growing-operations 

30. September 11, Carroll County News - (Arkansas) 911 dispatch goes down during 
storms Friday. For several minutes September 7, potential 9-1-1 callers in Carroll 
County, Arkansas heard only empty air. Thunderstorms and a dysfunctional backup 
generator knocked the emergency dispatch center offline. Those same storms also 
disabled the electronic controls to jailhouse doors, the sheriff said. He said normally a 
backup generator at the dispatch facility would have activated. However, the machine 
did not register the loss of power September 7 and failed to turn on. The county jail 
also lost power, disabling the electronic control system for doors. The system had yet to 
be repaired as of late September 10. 

Source: http://www.carrollconews.com/story/1892578.html 

31. September 10, Associated Press - (Texas) 6 detention center employees guilty on 
gun charges. Six of the seven Laredo, Texas, residents who pleaded guilty to illegally 
buying guns September 10 worked at a federal detention center. Federal prosecutors 
said the six worked at the Rio Grande Detention Center in Laredo. The center is 
privately managed by The Geo Group and holds federal detainees awaiting trial for the 
U.S. Marshals Service. The seventh was a close friend of one of them. Prosecutors 
alleged that in 2011, the group acquired 16 guns, mostly semi-automatic rifles of the 
sort preferred by organized criminal groups in Mexico. In the purchases, they indicated 
they were buying the guns for their own use. However, they were being paid to buy 
them for someone else, a tactic known as straw purchases. 

Source: http://abclocal.go.com/ktrk/storv?section=news/state&id=8805366 

32. September 10, Fort Wayne News-Sentinel - (Indiana) Indiana medic hurt when 
ambulance fired upon during transport. Three people were shot and a medic was 
injured September 9 in Fort Wayne, Indiana, after a passing car fired upon an 
ambulance carrying a stabbing victim and a car that contained the victim’s friends and 
family. Police in Fort Wayne have four suspects in custody, said a police spokesman. 
He said police were called to Piere’s Entertainment Center after a man was stabbed 
inside during an altercation. Medics treated the victim and put him in an ambulance to 
take him to a hospital. A passing car then opened fire on the car with the victim’s 
friends and family in it, and the ambulance, said the spokesman. All three occupants of 
the car were shot and stopped at a gas station, where they were met by medical staff. 

All three victims were in stable condition. The ambulance received multiple shots as 
the vehicle sped passed it while opening fire. A medic in the ambulance was cut by 
glass that was shot out. A suspect vehicle was later found by an Allen County Sheriff’s 
Department officer who attempted to stop it. The vehicle fled and a pursuit ensued. 
Police eventually stopped it and arrested four suspects. 

Source: http://www.emsworld.com/news/10776407/indiana-medic-hurt-when- 
ambulance-fired-upon-during-transport 
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Information Technology Sector 



33. September 11, Softpedia - (International) Researchers find flaws in Army-approved 
FortiGate appliances. Experts from the Vulnerability Lab identified a number of 
security holes in FortiGate UMT appliances found on the U.S. Army’s 2012 
Information Assurance Approved Products List (IA APL). The company addressed the 
vulnerabilities to ensure their customers are protected. Multiple cross-site scripting 
(XSS) issues were found to affect UTM Firewall appliance applications such as 
FortiGate-5000 Series, FortiGate-3950 Series, and FortiGate-3810A. Identified in May, 
the medium-severity flaws could have been leveraged by a remote attacker to hijack 
customer and administrator sessions, manipulate Web site context on the client side, 
and for phishing campaigns. Multiple persistent Web Vulnerabilities also affected the 
same FortiGate UTM appliance applications. They allowed a remote attacker to 
persistently inject their own malicious script code to manipulate specific customer and 
administrator requests. 

Source: http://news.softpedia.com/news/Researchers-Find-Flaws-In-Armv-Approved- 
FortiGate-Appliances-291459.shtml 

34. September 10, IDG News Service - (International) Glastopf Web application 
honeypot gets SQL injection emulation capability. The Honeynet Project, a non- 
profit organization that develops open-source security research tools, created a 
component for the Glastopf Web application honeypot software that can emulate 
applications vulnerable to SQL injection attacks to trick attackers into revealing their 
intentions. One of the several honeypot tools created by those involved in the Honeynet 
Project is called Glastopf and consists of a Web server that dynamically emulates 
vulnerable Web applications to attract attackers. September 8, the Honeynet Project 
released a SQL injection “handler” for the Glastopf Web application honeypot. The 
component was developed as part of Cyber Fast Track, a research program funded by 
the Defense Advanced Research Projects Agency. “The main goal of this project was 
the development of a SQL injection vulnerability emulator that goes beyond the 
collection of SQL vulnerability probings,” the Honeynet Project said. “It deceives the 
adversary with crafted responses matching his request into sending us the malicious 
payload which could include all ki nds of malicious code.” 

Source: 

http://www.pcworld.com/businesscenter/article/262081/glastopf web application hon 
eypot gets sql injection emulation capability.html 

35. September 10, Dark Reading - (National) Retail fail: Walmart, Target fared worst 
in Def Con social engineering contest. The third annual Def Con Social Engineering 
Capture the Flag Contest held at the Def Con 20 conference in July featured 20 
contestants competing to elicit as much specific information, or “flags,” out of 
employees at Walmart, AT&T, Verizon, Target, HP, Cisco, Mobil, Shell, FedEx, and 
UPS in cold-calls. Walmart and Target ended up with the highest scores, which means 
they did the worst, said a professional social engineer with social-engineer.org who 
lead the contest. Walmart performed the worst by exposing the most information both 
online and when its employees were cold-called by the social engineering contestants. 
Contestants posed as everything from fellow employees to office-cleaning service 
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providers, using these phony personae as pretexts to schmooze the employees to give 
up seemingly benign but actually very valuable data that can expose an organization to 
attack. One disturbing trend: every employee who was asked to visit a URL during the 
call did so. Among the flags contestants could pursue were disk-encryption type, 
ESSID name, computer model and OS, antivirus software, name of cleaning/janitorial 
service, and the name of the company’s third-party security guard company. Mobil and 
Shell employees contacted by the contestants posing as their various pretext characters 
were the most cautious and uncooperative in giving up information. 

Source: http://www.darkreading.com/insider-threat/167801100/security/attacks- 
breaches/240007096/retail-fail-walmart-target- fared- worst-in-def-con-social- 
engineering-contest.html 

For more stories, see items 8, 13, 16, and 36 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 



36. September 11, Fox News - (International) What really caused the massive GoDaddy 
outage? An outage to popular Internet registrar GoDaddy.com that took thousands of 
Web sites offline for 6 hours September 10 was the result of internal network events, 
not a malicious hacker, the company said September 11. In a statement released 
September 11, the company’s interim CEO said the incident was due to a corruption of 
network router tables. An anonymous Twitter user calling himself “Anonymous 
Own3r” had claimed credit for the September 10 attack. GoDaddy immediately 
acknowledged the incident September 10, which took down the company’s own Web 
site and email services. 

Source: http://www.foxnews.com/tech/2012/09/ll/godaddy-outage-due-to-corrupt- 
router-tables-not- 

hackers/%20%3Chttp:%20www.foxnews.com=%22%22%20tech=%22%22%202012= 

%22%22%2009=%22%22%2011=%22%22%20godaddv-outage-due-to-corrupt- 

router-tables-not-hackers=%22%22%3E%3C/http:%3E 

For more stories, see items 16 and 35 
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Commercial Facilities Sector 



37. September 11, Knoxville News Sentinel - (Tennessee) Arson not suspected in $1 
million Norris Lake marina fire. Arson was not suspected in a LaFollette, Tennessee, 
marina fire September 10 that consumed more than $1 million worth of watercraft and 
docks. The marina owner said 58-60 boats were burned. Damaged watercraft included 
fishing boats, pontoon boats, and ski boats. Covered slips impacted by the flames were 
B, C, and D, he said. The marina has 170 slips. The owner estimated each lost boat 
ranges in value from $20,000-$30,000. He had no dollar value readily available on the 
loss of his dock and covered slips and estimated about “90 percent of our business is 
out of state.” Firefighters used floating pumps supplied by the Caryville and Pinecrest 
departments. The Caryville fire chief said the floating pump is a device that can be 
placed in a body of water that pumps water to firefighters. He said flames were on 
docks about 100-150 feet from the main office and restaurant. Flames did not reach the 
office area. At the same time, firefighters commandeered two pontoon boats to fight the 
flames. 

Source: http://www.knoxnews.com/news/2012/sep/ll/arson-not-suspected-in-l- 
million-norris-lake/ 



38. September 10, Associated Press - (Arkansas) State police: 5 wounded in Wynne 
park shooting. The Arkansas State Police said five people were wounded at a shooting 
in a city park in Wynne, Arkansas, the Associated Press reported September 10. A State 
police spokesman told the Forrest City Times-Herald that the shooting occurred 
September 8 at E.U. Deshay Park. Wynne police are leading the investigation. State 
police said the five victims all were treated and eventually released from area hospitals. 
Source: http://www.sfgate.com/news/article/State-police-5-wounded-in-Wynne-park- 
shooting-3854533.php 

39. September 10, Knoxville News Sentinel - (Tennessee) Electrical problem likely cause 
of downtown Maryville fire. An electrical problem was the likely cause of a fire that 
heavily damaged a nearly 100-year-old office building in downtown Maryville, 
Tennessee, September 10, officials said. The fire, reported at the Law Office Building, 
appeared to have started in a second-floor closet where computers are housed, stated 
the Maryville police and fire chief. The fire displaced the 30,000-square-foot building’s 
15 commercial tenants. Crews with the Maryville and Alcoa fire departments worked 4 
hours to extinguish the flames, which buckled or collapsed sections of the roof. The 
incident closed the surrounding block. 

Source: http://www.knoxnews.com/news/2Q12/sep/10/flames-erupt-downtown- 
maryville-office-building/ 

40. September 10, KTNV 13 Las Vegas - (Nevada) Apartments near Flamingo and 
Decatur evacuated due to gas leak. Nearly 10 apartment buildings in Las Vegas were 
evacuated September 10 due to a natural gas leak. Lirefighters immediately began 
evacuating dozens of residents of the buildings. Southwest Gas worked for more than 5 
hours to repair the leak. Crews dug up pipes where the leak was believed to have 
started. Although, they are still investigating what may have caused it. Two Clark 
County School District buses were sent to the area, to provide evacuees with a place to 
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escape the heat. Most residents were allowed back in their homes September 10. 
However, the Red Cross helped 15 families stay in a hotel for the night. Those families 
were not allowed back in to their homes, because Southwest Gas was still doing some 
inspections to make sure natural gas was at safe levels. 

Source: http://www.ktnv.com/news/local/169229436.html 

41. September 10, KGET 17 Bakersfield - (California) Police standoff ends in downtown 
Bakersfield. A police standoff ended overnight in downtown Bakersfield, California, 
after police said a man barricaded himself inside an apartment complex, then set it on 
fire, KGET 17 Bakersfield reported September 10. A resident at an apartment called 
police late September 9 when the suspect began throwing his furniture out the window, 
yelling he had a gun and knife. When police arrived, officers said the suspect refused to 
come out. They said about an hour later, he surrendered, but then noticed he had set the 
apartment on fire. Firefighters said as many as eight apartment units were evacuated. 
No one was injured. However, police said the suspect pepper sprayed an officer. 
Estimated damage was at least $50,000. 

Source: http://www.kget.com/news/local/storv/Police-standoff-ends-in-downtown- 
Bakersfield/3h3dK6kS9kiJiclj4Mfx3Q.cspx 

42. September 10, KMGH 7 Denver - (Colorado) Walmart evacuated over bomb 
threat. A Walmart in Englewood, Colorado, was evacuated because of a bomb threat, 
stated Englewood Police dispatchers. They said the bomb threat concerning the store 
was received September 10. The Arapahoe County Bomb Squad and Jefferson County 
Sheriff’s Department searched the store and parking lot with a bomb-sniffing dog. 
Nothing was found and they left the area nearly 3 hours later. A witness photographed 
about 20 people huddled in the shadow of a nearby building. 

Source: http://www.thedenverchannel.com/news/31423885/detail.html 

For more stories, see items 35, 36, and 43 
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National Monuments and Icons Sector 



43. September 11, Associated Press - (West) Evacuations ordered in Washington State, 
Wyoming, Montana as fire season rages on across west. Crews in central 
Washington and Wyoming worked September 10 to protect homes from two of the 
many wildfires burning across the west as a destructive fire season stretches into 
September with no relief expected from the weather anytime soon, the Associated Press 
reported September 11. The National Weather service issued red-flag warnings for 
wide swaths of eastern Washington and Oregon, Idaho, Montana, and all of Wyoming. 
In Wyoming, authorities evacuated 500 people from homes and cabins as a wildfire 
about 10 miles southeast of Casper, the Sheep Herder Hill Fire, quickly grew. The fire 
started September 9, burned at least six structures, and scorched more than 15 square 
miles by September 10. About 1,000 residents had been told to prepare to leave as the 
Little Horsethief Fire burned more than 4 squares miles in a mountainous area less than 
2 miles south of Jackson. The blaze was about 15 percent contained. In Washington 
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State, residents of about 180 homes on the west side of Wenatchee, were told to 
evacuate September 9, a Wenatchee police sergeant said. In western Montana, residents 
of about 350 homes threatened by a wildfire west of Hamilton were told to leave 
September 10. The Sawtooth Fire grew to 2 square miles and was threatening houses, 
two businesses, and scores of sheds, bams, and other buildings spread out over a 10- 
mile area, a fire information officer said. Blazes have scorched more than 8.1 million 
acres across the west so far in 2012, up from the 10-year average of 6.1 million, 
according to the National Interagency Fire Center. 

Source: http://www.foxnews.com/us/2012/Q9/10/fire-season-drags-on-in-west- 
evacuations-ordered/ 



For another story, see item 25 
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Dams Sector 



44. September 10, Montreal Gazette - (International) Dikes burst as rain ahead of 
tropical storm Leslie swamps Nova Scotia rivers. Heavy rain swamped two Nova 
Scotia, Canada rivers September 10, leading to flooding and evacuations in Colchester 
County. Two Nova Scotia rivers spilled their banks as several dikes gave way, leading 
to flooding that caught some residents in the Truro area by surprise. Dozens of other 
homes and businesses were flooded, including 40 homes on one street alone. Water 
levels began rising in the North and Salmon rivers near Truro, which remained under a 
rainfall warning as tropical storm Leslie churned toward Atlantic Canada. 

Source: 

http://www.montrealgazette.com/news/Dikes+burst+rain+ahead+tropical+storm+Leslie 

+swamps+Nova+Scotia/7218856/story.html 
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